[{"data":1,"prerenderedAt":446},["ShallowReactive",2],{"tool-doc-sigploit":3,"content-query-aokFJj6krE":266},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":15,"_type":260,"_id":261,"_source":262,"_file":263,"_stem":264,"_extension":265},"\u002Ftools\u002Fsigploit","tools",false,"","SigPloit","Comprehensive telecom signaling exploitation framework targeting SS7 (MAP\u002FCAMEL\u002FISUP), Diameter (S6a\u002FCx\u002FRo\u002FGy), and GTP-C (v1\u002Fv2) networks.","SS7 \u002F Diameter \u002F GTP","Telecom Signaling Exploitation Framework","Ethernet \u002F SCTP Interface \u002F VPN Gateway","sigploit","https:\u002F\u002Fapp.telcosec.net",{"type":16,"children":17,"toc":249},"root",[18,27,41,48,172,178,185,197,203,212,218,227,233],{"type":19,"tag":20,"props":21,"children":23},"element","h1",{"id":22},"sigploit-telecom-signaling-exploitation-framework",[24],{"type":25,"value":26},"text","SigPloit — Telecom Signaling Exploitation Framework",{"type":19,"tag":28,"props":29,"children":30},"p",{},[31,33,39],{"type":25,"value":32},"SigPloit is the premier dedicated penetration testing framework for telecommunication signaling networks. In ",{"type":19,"tag":34,"props":35,"children":36},"strong",{},[37],{"type":25,"value":38},"TelcoChisel",{"type":25,"value":40},", SigPloit is pre-compiled with updated SCTP kernel socket libraries, LibSS7, and modern Diameter dictionary definitions.",{"type":19,"tag":42,"props":43,"children":45},"h2",{"id":44},"key-telecom-attack-modules",[46],{"type":25,"value":47},"Key Telecom Attack Modules",{"type":19,"tag":49,"props":50,"children":51},"ul",{},[52,88,114,139],{"type":19,"tag":53,"props":54,"children":55},"li",{},[56,61,63,70,72,78,80,86],{"type":19,"tag":34,"props":57,"children":58},{},[59],{"type":25,"value":60},"Location Tracking",{"type":25,"value":62},": Send MAP ",{"type":19,"tag":64,"props":65,"children":67},"code",{"className":66},[],[68],{"type":25,"value":69},"SendRoutingInfoForSM",{"type":25,"value":71}," (SRI-SM), ",{"type":19,"tag":64,"props":73,"children":75},{"className":74},[],[76],{"type":25,"value":77},"ProvideSubscriberInfo",{"type":25,"value":79}," (PSI), and ",{"type":19,"tag":64,"props":81,"children":83},{"className":82},[],[84],{"type":25,"value":85},"AnyTimeInterrogation",{"type":25,"value":87}," (ATI) to pinpoint subscriber cell IDs and geographic coordinates.",{"type":19,"tag":53,"props":89,"children":90},{},[91,96,98,104,106,112],{"type":19,"tag":34,"props":92,"children":93},{},[94],{"type":25,"value":95},"SMS & Voice Interception",{"type":25,"value":97},": Execute ",{"type":19,"tag":64,"props":99,"children":101},{"className":100},[],[102],{"type":25,"value":103},"UpdateLocation",{"type":25,"value":105}," (UL) and ",{"type":19,"tag":64,"props":107,"children":109},{"className":108},[],[110],{"type":25,"value":111},"InsertSubscriberData",{"type":25,"value":113}," (ISD) to hijack inbound SMS verification codes and 2FA tokens.",{"type":19,"tag":53,"props":115,"children":116},{},[117,122,123,129,131,137],{"type":19,"tag":34,"props":118,"children":119},{},[120],{"type":25,"value":121},"Denial of Service (DoS)",{"type":25,"value":97},{"type":19,"tag":64,"props":124,"children":126},{"className":125},[],[127],{"type":25,"value":128},"PurgeMS",{"type":25,"value":130}," and ",{"type":19,"tag":64,"props":132,"children":134},{"className":133},[],[135],{"type":25,"value":136},"CancelLocation",{"type":25,"value":138}," to detach subscribers from cellular operator VLRs.",{"type":19,"tag":53,"props":140,"children":141},{},[142,147,148,154,156,162,164,170],{"type":19,"tag":34,"props":143,"children":144},{},[145],{"type":25,"value":146},"Diameter 4G\u002FLTE Attacks",{"type":25,"value":97},{"type":19,"tag":64,"props":149,"children":151},{"className":150},[],[152],{"type":25,"value":153},"ULR",{"type":25,"value":155}," (Update-Location-Request), ",{"type":19,"tag":64,"props":157,"children":159},{"className":158},[],[160],{"type":25,"value":161},"CLR",{"type":25,"value":163}," (Cancel-Location-Request), and ",{"type":19,"tag":64,"props":165,"children":167},{"className":166},[],[168],{"type":25,"value":169},"PUR",{"type":25,"value":171}," (Purge-UE-Request) across S6a interfaces.",{"type":19,"tag":42,"props":173,"children":175},{"id":174},"pre-installed-telcochisel-cheatsheet",[176],{"type":25,"value":177},"Pre-installed TelcoChisel Cheatsheet",{"type":19,"tag":179,"props":180,"children":182},"h3",{"id":181},"_1-launch-sigploit-cli",[183],{"type":25,"value":184},"1. Launch SigPloit CLI",{"type":19,"tag":186,"props":187,"children":192},"pre",{"className":188,"code":190,"language":191,"meta":7},[189],"language-bash","# Launch SigPloit interactive console\nsigploit\n","bash",[193],{"type":19,"tag":64,"props":194,"children":195},{"__ignoreMap":7},[196],{"type":25,"value":190},{"type":19,"tag":179,"props":198,"children":200},{"id":199},"_2-configure-local-remote-sctp-signatures",[201],{"type":25,"value":202},"2. Configure Local & Remote SCTP Signatures",{"type":19,"tag":186,"props":204,"children":207},{"className":205,"code":206,"language":191,"meta":7},[189],"# Within SigPloit console:\nsigploit > use ss7\u002Ftracking\u002Fpsi\nsigploit (ss7\u002Ftracking\u002Fpsi) > set LocalIP 192.168.1.100\nsigploit (ss7\u002Ftracking\u002Fpsi) > set RemoteIP 10.10.20.1\nsigploit (ss7\u002Ftracking\u002Fpsi) > set RemotePort 2905\nsigploit (ss7\u002Ftracking\u002Fpsi) > set TargetIMSI 001010123456789\nsigploit (ss7\u002Ftracking\u002Fpsi) > run\n",[208],{"type":19,"tag":64,"props":209,"children":210},{"__ignoreMap":7},[211],{"type":25,"value":206},{"type":19,"tag":179,"props":213,"children":215},{"id":214},"_3-diameter-s6a-location-tracking",[216],{"type":25,"value":217},"3. Diameter S6a Location Tracking",{"type":19,"tag":186,"props":219,"children":222},{"className":220,"code":221,"language":191,"meta":7},[189],"# Execute Diameter User-Authorization \u002F Location check\nsigploit > use diameter\u002Ftracking\u002Fulr\nsigploit (diameter\u002Ftracking\u002Fulr) > set TargetIMSI 208950000000001\nsigploit (diameter\u002Ftracking\u002Fulr) > set DestinationHost hss.mnc095.mcc208.3gppnetwork.org\nsigploit (diameter\u002Ftracking\u002Fulr) > run\n",[223],{"type":19,"tag":64,"props":224,"children":225},{"__ignoreMap":7},[226],{"type":25,"value":221},{"type":19,"tag":42,"props":228,"children":230},{"id":229},"practice-in-telcosec-cloud-academy",[231],{"type":25,"value":232},"Practice in TelcoSec Cloud Academy",{"type":19,"tag":28,"props":234,"children":235},{},[236,238],{"type":25,"value":237},"To practice SS7\u002FDiameter attacks against isolated carrier STP\u002FHSS nodes in private cloud testbeds:\n👉 ",{"type":19,"tag":34,"props":239,"children":240},{},[241],{"type":19,"tag":242,"props":243,"children":246},"a",{"href":14,"rel":244},[245],"nofollow",[247],{"type":25,"value":248},"Access the SS7\u002FDiameter Signaling Lab at App.TelcoSec.Net",{"title":7,"searchDepth":250,"depth":250,"links":251},2,[252,253,259],{"id":44,"depth":250,"text":47},{"id":174,"depth":250,"text":177,"children":254},[255,257,258],{"id":181,"depth":256,"text":184},3,{"id":199,"depth":256,"text":202},{"id":214,"depth":256,"text":217},{"id":229,"depth":250,"text":232},"markdown","content:tools:sigploit.md","content","tools\u002Fsigploit.md","tools\u002Fsigploit","md",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"name":8,"protocol":10,"category":11,"hardware":12,"command":13,"academyLab":14,"body":267,"_type":260,"_id":261,"_source":262,"_file":263,"_stem":264,"_extension":265},{"type":16,"children":268,"toc":437},[269,273,282,286,381,385,389,397,401,409,413,421,425],{"type":19,"tag":20,"props":270,"children":271},{"id":22},[272],{"type":25,"value":26},{"type":19,"tag":28,"props":274,"children":275},{},[276,277,281],{"type":25,"value":32},{"type":19,"tag":34,"props":278,"children":279},{},[280],{"type":25,"value":38},{"type":25,"value":40},{"type":19,"tag":42,"props":283,"children":284},{"id":44},[285],{"type":25,"value":47},{"type":19,"tag":49,"props":287,"children":288},{},[289,315,335,355],{"type":19,"tag":53,"props":290,"children":291},{},[292,296,297,302,303,308,309,314],{"type":19,"tag":34,"props":293,"children":294},{},[295],{"type":25,"value":60},{"type":25,"value":62},{"type":19,"tag":64,"props":298,"children":300},{"className":299},[],[301],{"type":25,"value":69},{"type":25,"value":71},{"type":19,"tag":64,"props":304,"children":306},{"className":305},[],[307],{"type":25,"value":77},{"type":25,"value":79},{"type":19,"tag":64,"props":310,"children":312},{"className":311},[],[313],{"type":25,"value":85},{"type":25,"value":87},{"type":19,"tag":53,"props":316,"children":317},{},[318,322,323,328,329,334],{"type":19,"tag":34,"props":319,"children":320},{},[321],{"type":25,"value":95},{"type":25,"value":97},{"type":19,"tag":64,"props":324,"children":326},{"className":325},[],[327],{"type":25,"value":103},{"type":25,"value":105},{"type":19,"tag":64,"props":330,"children":332},{"className":331},[],[333],{"type":25,"value":111},{"type":25,"value":113},{"type":19,"tag":53,"props":336,"children":337},{},[338,342,343,348,349,354],{"type":19,"tag":34,"props":339,"children":340},{},[341],{"type":25,"value":121},{"type":25,"value":97},{"type":19,"tag":64,"props":344,"children":346},{"className":345},[],[347],{"type":25,"value":128},{"type":25,"value":130},{"type":19,"tag":64,"props":350,"children":352},{"className":351},[],[353],{"type":25,"value":136},{"type":25,"value":138},{"type":19,"tag":53,"props":356,"children":357},{},[358,362,363,368,369,374,375,380],{"type":19,"tag":34,"props":359,"children":360},{},[361],{"type":25,"value":146},{"type":25,"value":97},{"type":19,"tag":64,"props":364,"children":366},{"className":365},[],[367],{"type":25,"value":153},{"type":25,"value":155},{"type":19,"tag":64,"props":370,"children":372},{"className":371},[],[373],{"type":25,"value":161},{"type":25,"value":163},{"type":19,"tag":64,"props":376,"children":378},{"className":377},[],[379],{"type":25,"value":169},{"type":25,"value":171},{"type":19,"tag":42,"props":382,"children":383},{"id":174},[384],{"type":25,"value":177},{"type":19,"tag":179,"props":386,"children":387},{"id":181},[388],{"type":25,"value":184},{"type":19,"tag":186,"props":390,"children":392},{"className":391,"code":190,"language":191,"meta":7},[189],[393],{"type":19,"tag":64,"props":394,"children":395},{"__ignoreMap":7},[396],{"type":25,"value":190},{"type":19,"tag":179,"props":398,"children":399},{"id":199},[400],{"type":25,"value":202},{"type":19,"tag":186,"props":402,"children":404},{"className":403,"code":206,"language":191,"meta":7},[189],[405],{"type":19,"tag":64,"props":406,"children":407},{"__ignoreMap":7},[408],{"type":25,"value":206},{"type":19,"tag":179,"props":410,"children":411},{"id":214},[412],{"type":25,"value":217},{"type":19,"tag":186,"props":414,"children":416},{"className":415,"code":221,"language":191,"meta":7},[189],[417],{"type":19,"tag":64,"props":418,"children":419},{"__ignoreMap":7},[420],{"type":25,"value":221},{"type":19,"tag":42,"props":422,"children":423},{"id":229},[424],{"type":25,"value":232},{"type":19,"tag":28,"props":426,"children":427},{},[428,429],{"type":25,"value":237},{"type":19,"tag":34,"props":430,"children":431},{},[432],{"type":19,"tag":242,"props":433,"children":435},{"href":14,"rel":434},[245],[436],{"type":25,"value":248},{"title":7,"searchDepth":250,"depth":250,"links":438},[439,440,445],{"id":44,"depth":250,"text":47},{"id":174,"depth":250,"text":177,"children":441},[442,443,444],{"id":181,"depth":256,"text":184},{"id":199,"depth":256,"text":202},{"id":214,"depth":256,"text":217},{"id":229,"depth":250,"text":232},1790363499441]